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((711/202) or (711/205) or (711/207) or (711/217) 
or (707/ 1) or (707/3) or (707/6) or (707/9) or 
(707/10) or (707/102) or (709/203) or (709/223) 
or (709/224) or (709/225) or (713/176) or 
(713/178) or (380/230) or (380/232) or (380/234) 
or (380/233)). CCLS. 

(((711/202) or (711/205) or (711/207) or 
(711/217) or (707/1) or (707/3) or (707/6) or 
(707/9) or (707/10) or (707/102) or (709/203) or 
(709/223) or (709/224) or (709/225) or (713/176) 
or (713/178) or (380/230) or (380/232) or 
(380/234) or (380/233)). CCLS.) and signature$l 
(record$4 log logs logging logged stor$3) near3 
(incident$l tamper$3 invas$4 invad$3 intrus$4 
intrud$3 unauthoriz$6 unauthoris$6 unverif$6 
attack$3 hack$3 unidentif$5 malicious$3) 
((((711/202) or (711/205) or (711/207) or 
(711/217) or (707/1) or (707/3) or (707/6) or 
(707/9) or (707/10) or (707/102) or (709/203) or 
(709/223) or (709/224) or (709/225) or (713/176) 
or (713/178) or (380/230) or (380/232) or 
(380/234) or (380/233)).CCLS.) and signature$l) 
and ((record$4 log logs logging logged stor$3) 
near3 (incident$l tamper$3 invas$4 invad$3 
intrus$4 intrud$3 unauthoriz$6 unauthoris$6 
unverif$6 attack$3 hack$3 unidentif$5 
malicious$3)) 

(record$4 log logs logging logged stor$3) near3 
(display$3 show$3 screen$ 1 led) 
(((((711/202) or (711/205) or (711/207) or 
(711/217) or (707/1) or (707/3) or (707/6) or 
(707/9) or (707/10) or (707/102) or (709/203) or 
(709/223) or (709/224) or (709/225) or (713/176) 
or (713/178) or (380/230) or (380/232) or 
(380/234) or (380/233)).CCLS.) and signature$l) 
and ((record$4 log logs logging logged stor$3) 
near3 (incident$l tamper$3 invas$4 invad$3 
intrus$4 intrud$3 unauthoriz$6 unauthoris$6 
unverif$6 attack$3 hack$3 unidentif$5 
malicious$3))) and ((record$4 log logs logging 
logged stor$3) near3 (display$3 show$3 screen$l 
led)) 

(list$3 table$ 1 database$ 1 memory ram rom 
eepom eprom prom storage$l) near3 (address$2 
location$l destination$l) 
((((((711/202) or (711/205) or (711/207) or 
(711/217) or (707/1) or (707/3) or (707/6) or 
(707/9) or (707/10) or (707/102) or (709/203) or 
(709/223) or (709/224) or (709/225) or (713/176) 
or (713/178) or (380/230) or (380/232) or 
(380/234) or (380/233)).CCLS.) and signature$l) 
and ((record$4 log logs logging logged stor$3) 
near3 (incident$l tamper$3 invas$4 invad$3 
intrus$4 intrud$3 unauthoriz$6 unauthoris$6 
unverif$6 attack$3 hack$3 unidentif$5 
malicious$3))) and ((record$4 log logs logging 
logged stor$3) near3 (display$3 show$3 screen$l 
led))) and ((list$3 table$l database$l memory ram 
rom eepom eprom prom storage$l) near3 
(address$2 location$l destination$l)) 
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(record$4 log logs logged stor$3 event$l 
procedure$l selection$l action$l activit$3) near3 
(display$3 show$3 screen$l led) 
(record$4 log logs logging logged stor$3 archiv$3 
select$6 chos$3 choos$3 pick$3 receiv$3) near3 
(procedure$ 1 incident$l event$l action$l 
activit$3 behavior$l) 
((record$4 log logs logged stor$3 event$l 
procedure$ 1 selection$l action$l activit$3) near3 
(display$3 show$3 screen$l led)) and ((record$4 
log logs logging logged stor$3 archiv$3 select$6 
chos$3 choos$3 pick$3 receiv$3) near3 
(procedure$ 1 incident$l event$l action$l 
activit$3 behavior$l)) 
(((record$4 log logs logged stor$3 event$l 
procedure$ 1 selections 1 action$l activit$3) near3 
(display$3 show$3 screenSl led)) and ((record$4 
log logs logging logged stor$3 archiv$3 select$6 
chos$3 choos$3 pick$3 receiv$3) near3 
(procedures 1 incidents 1 event$l action$l 
activit$3 behavior$l)) ) and ((record$4 log logs 
logging logged stor$3) near3 (incidents 1 tamper$3 
invas$4 invad$3 intrus$4 intrud$3 unauthoriz$6 
unauthoris$6 unverif$6 attack$3 hack$3 
unidentif$5 malicious$3)) 
((((record$4 log logs logged stor$3 eventS 1 
procedures 1 selections 1 action$l activit$3) near3 
(display$3 show$3 screen$l led)) and ((record$4 
log logs logging logged stor$3 archiv$3 select$6 
chos$3 choos$3 pick$3 receiv$3) near3 
(procedures 1 incidents 1 event$l action$l 
activit$3 behavior$l)) ) and ((record$4 log logs 
logging logged stor$3) near3 (incidents 1 tamper$3 
invas$4 invad$3 intrus$4 intrud$3 unauthoriz$6 
unauthoris$6 unverif$6 attack$3 hack$3 
unidentif$5 malicious$3))) and signatures 1 
(((((record$4 log logs logged stor$3 eventSl 
procedures 1 selections 1 actionSl activit$3) near3 
(display$3 show$3 screen$l led)) and ((record$4 
log logs logging logged stor$3 archiv$3 select$6 
chos$3 choos$3 pick$3 receiv$3) near3 
(procedures 1 incidents 1 event$l actionSl 
activit$3 behavior$l)) ) and ((record$4 log logs 
logging logged stor$3) near3 (incidents 1 tamper$3 
invas$4 invad$3 intrus$4 intrud$3 unauthoriz$6 
unauthoris$6 unverif$6 attack$3 hack$3 
unidentif$5 malicious$3))) and signatures 1) and 
(timestamp$3 ((time date) near (signatures 1 
stamp$3))) 
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85 ((((((record$4 log logs logged stor$3 event$l 

procedure$ 1 selections 1 action$l activit$3) near3 
(display$3 show$3 screen$l led)) and ((record$4 
log logs logging logged stor$3 archiv$3 select$6 
chos$3 choos$3 pick$3 receiv$3) near3 
(procedure$ 1 incidents 1 eventSl actionSl 
activit$3 behavior$l)( ) and ((record$4 log logs 
logging logged stor$3) near3 (incidents 1 tamper$3 
invas$4 invad$3 intrus$4 intrud$3 unauthoriz$6 
unauthoris$6 unverif$6 attack$3 hack$3 
unidentif$5 malicious$3))) and signatures 1) and 
(timestamp$3 ((time date) near (signatures 1 
stamp$3)))) and ((list$3 tableSl databaseSl 
memory ram rom eepom eprom prom storageS 1 ) 
near3 (address$2 location$l destinations 1)) 



USPAT; 
IBM TDB 



2004/04/30 
12:45 



Search History 4/30/04 12:49:36 PM Page 3 
C: \ APPS\EAST\Workspaces\23 1 .wsp 



